AI Policies
Develop practical guidance on acceptable AI use, information handling and human review.
- Acceptable-use policy drafting
- Guidance on confidential and personal information
- Human review and escalation pathways
AI Compliance & Governance
Turn AI risks and requirements into practical business controls.
We help organisations understand their AI use, assess risks, establish policies and responsibilities, and maintain effective oversight.
Risk Reviews · Policies & Controls · Staff Training · Ongoing Support
Book an appointment:
Our Services: Practical support. Clear outcomes.
Choose a starting point that fits your AI use, risks and organisational capacity.
Risk Management
Identify and prioritise the risks associated with the way your organisation uses AI.
- AI use-case and risk mapping
- Risk register and control priorities
- Review questions for tools and suppliers
Governance
Clarify who makes decisions, who reviews outcomes and when issues need to be escalated.
- Roles and responsibilities
- Approval and review pathways
- Governance reporting and review cadence
Compliance
Map relevant obligations and internal requirements to your proposed AI uses.
- Requirements and policy mapping
- Gap assessment and action priorities
- Questions for legal or specialist review
Staff Training
Help staff recognise appropriate AI uses, common risks and the limits of automated outputs.
- AI awareness sessions
- Role-relevant scenarios
- Practical use and review guidance
Ongoing Support
Review and refine your governance approach as tools, practices and priorities evolve.
- Policy and register reviews
- Follow-up guidance on agreed topics
- Support for governance improvements
Why AI Compliance & Governance Matters
AI is already influencing business decisions. Can your organisation explain how it is used and controlled?
Understand where AI is used, what information it handles, who approves its use, and what evidence supports oversight.
Understand your AI exposure
Identify AI tools, data flows and decisions that need attention.
Establish clear rules
Give staff practical guidance on approved tools, permitted data and required review.
Make accountability clear
Define who approves AI use, owns decisions and responds to issues.
Demonstrate oversight
Maintain evidence to support management reviews, customer enquiries and applicable compliance requirements.
Australian laws and governance expectations
Privacy Act 1988 & Australian Privacy Principles
Where the Privacy Act applies, AI use must meet relevant personal information obligations, including privacy-policy transparency for automated decisions when the statutory conditions apply.
Official sourceOAIC: automated decision-making transparency ↗
Competition and Consumer Act 2010 — Australian Consumer Law
AI capability claims and customer-facing practices must meet applicable consumer protection requirements, including rules against misleading representations.
Official sourceNational AI Centre: AI and Australian law ↗
Sex Discrimination Act 1984 & Disability Discrimination Act 1992
AI-assisted recruitment and service decisions must comply with applicable anti-discrimination laws, including relevant federal and state protections.
Corporations Act 2001 & National Consumer Credit Protection Act 2009
Financial services and credit businesses must assess how AI use affects their applicable licensing, conduct and governance obligations.
Official sourceASIC: AI governance review ↗
Upcoming: ADM privacy transparency requirements commence on 10 December 2026 for APP entities where the statutory conditions apply.
Examples only, not an exhaustive legal checklist. Applicable requirements depend on your organisation, industry, data and AI use. Other sector-specific laws may apply; government policies and voluntary frameworks have different scopes.
WHY US
Business context. Practical implementation. Evidence.
Business understanding
Business analysis, project delivery, data analytics and AI project development experience inform a practical approach to governance.
Practical implementation
Translate requirements into policies, processes, responsibilities and role-specific training.
Evidence-led oversight
Define the records and checks that help owners understand whether controls work.
Proportionate governance
Set scope and priorities according to use, risk and organisational capacity.
Start with a practical conversation
Tell us about your organisation, how you use AI, your main concern and any relevant timeframe. We can discuss a suitable starting point and scope.
Please do not include confidential documents or sensitive personal information in your initial email.